Duo self-hosted BYOM authentication iteration 1: Token auth with GitLab AIGW
## Description For iteration 1, we will use token authentication via the existing `api_token` field the on the `ai_self_hosted_models` table. The roadmap for [provider support](https://gitlab.com/groups/gitlab-org/-/work_items/20499#note_3021687230) is in this (preferred) order: > 1. Bedrock (parity with current functionality) > 2. Azure (parity with current functionality) > 3. Vertex (popular platform with many models) > 4. Anthropic and OpenAI (for customers using API's directly from Anthropic and OpenAI) Token authentication is supported by Bedrock, Azure, OpenAI and Anthropic – but not Vertex. Vertex support will come in [iteration 2](https://gitlab.com/groups/gitlab-org/-/epics/20824) when we implement support for temporary credentials. ### BYOM with tokens UX See [comment](https://gitlab.com/groups/gitlab-org/-/epics/20463#note_3046586170) for more context | BYOM model creation form | Recording | |--------------------------|-----------| | ![Screenshot_2026-01-30_at_5.29.46_pm](/uploads/0f6a5430c37ab73e4c04cc7162802fae/Screenshot_2026-01-30_at_5.29.46_pm.png){width="702" height="600"} | ![Screen_Recording_2026-01-30_at_5.07.45_pm](/uploads/666f1b48ab5cb436289d8a5abc64ed11/Screen_Recording_2026-01-30_at_5.07.45_pm.mov){width="666" height="600"} |
epic